Annual Day School Photography Consent Form: DPDPA Section 9 Template for Indian Schools

| Applies to | Schools & Educational Institutions operating in India | | Primary law | DPDPA 2023 · Section 9 | | Penalty ceiling | ₹200 crore per violation | | Enforcement status| Data Protection Board accepting complaints — May 2026 | | Source | DPDPAReady Compliance Team |

---

Your school’s annual day is four weeks away. The principal asks you to “get photos sorted” — student performances, inter-house competitions, Republic Day tableau, yearbook shoots. You ask: what about consent?

The reply: “We’ve always photographed annual day. Parents know it’s happening.”

Under Section 9 of the DPDPA 2023, that assumption is illegal. Schools processing photographs of children (defined as minors under 18) must obtain verifiable parental consent before each distinct processing purpose — annual day, sports day, yearbook, admission brochure, or school website. A single blanket consent from admission is insufficient. The Data Protection Board has begun investigating school photography complaints as of May 2026. Violations trigger penalties up to ₹200 crore per violation. One parent complaint is enough to trigger a Board investigation.

This template ensures your school collects legally defensible, revocable, purpose-specific parental consent — and maintains records to prove it.

---

What a Compliant School Photography Consent Form Must Include

A Section 9-compliant school photography consent form must contain these seven mandatory elements:

1. Explicit statement that consent is for children’s personal data The form must name the child explicitly and state that photographs constitute personal data under DPDPA. Vague language (“photography during school events”) is insufficient. Name the child, the event, and what biometric data (facial features, expressions) will be captured.

2. Purpose-specific consent checkboxes Do not ask blanket consent for “all photography.” Section 9 requires separate, informed consent for each processing purpose. Include separate tick boxes: ☐ Annual day performance video / ☐ School yearbook print / ☐ School website gallery / ☐ Admission brochure / ☐ WhatsApp parent group / ☐ Fedena/school app. Parents must actively tick only the purposes they consent to. Pre-ticked boxes are invalid.

3. Plain-language explanation of what “processing” means Most parents assume “photography” means the camera click. Explain that under DPDPA, “processing” includes capture, storage, editing, sharing to parents, posting on platforms, retaining in Fedena, use in future years, and deletion. Specify storage location: “Photos will be stored in [Google Drive / Fedena / local server]. Retention period: [X months/until end of academic year]. Access: [School staff / yearbook designer / parents only].”

4. Explicit statement of the child’s biometric data involved Section 9 treats photographs of minors as biometric data (facial features are biometric). The form must explicitly state: “The photograph captures your child’s facial features, expressions, and appearance. These are biometric personal data under Section 3(b) of DPDPA.”

5. Revocation clause with a clear process Section 6 requires consent to be revocable. State: “You may revoke consent for any purpose at any time by written email to [designated contact] dated [DD-MM-YYYY]. Upon revocation, we will not capture new photos for that purpose, but photos already published cannot be withdrawn from external platforms.” Provide a named contact: Principal/Photography Coordinator email.

6. Statement that refusal has no consequence Parents must understand that refusing consent does NOT affect their child’s school experience. State: “Refusal of consent will not affect your child’s participation in school events, access to education, or school services. Students whose parents do not consent will be [seated away from camera / given a participant’s role out of frame / provided alternative activity].”

7. Parent identity verification and signature date Verifiable consent requires proof of parental authority. The form must require: Parent/guardian full name, relationship to child, phone number, email, parent ID number (Aadhaar last 4 digits or school roll number), date of signature, and physical or digital signature.

---

The Template

Copy and customise this template. Save as a PDF, Google Form, or printed form. Collect signed originals or digitally signed responses (Google Forms responses are acceptable if the parent’s email is captured).

---

SCHOOL PHOTOGRAPHY & BIOMETRIC DATA CONSENT FORM
[School Name], [Location]  |  Academic Year [20XX–20XX]

PARENT/GUARDIAN INFORMATION
___________________________________________________________
Child's Full Name: _________________________  Roll No: _____
Class: ___________  Date of Birth: _______________________
Parent/Guardian Full Name: ______________________________
Relationship to child: ☐ Mother  ☐ Father  ☐ Guardian
Phone Number: _______________  Email: ____________________
Aadhaar Last 4 Digits (if available): ____________________

---

IMPORTANT: PLEASE READ THIS CAREFULLY

1. WHAT IS BIOMETRIC DATA?
Photographs of your child capture biometric personal data — facial 
features, expressions, and appearance. Under India's DPDPA 2023 
(Section 9), schools must obtain your explicit, verifiable, 
revocable consent before processing children's biometric data for 
ANY purpose.

2. WHAT DOES "PROCESSING" MEAN?
Processing includes: capturing photos, storing them, editing, 
sharing with parents/staff, posting on school platforms, printing 
in yearbooks, using for admission marketing, retaining in school 
databases, and sharing with third parties.

3. YOUR CONSENT OPTIONS
Below are specific uses of your child's photography during the 
[ACADEMIC YEAR 20XX–20XX]. YOU MUST ACTIVELY TICK ONLY THE BOXES 
FOR WHICH YOU CONSENT. Pre-ticked boxes do not apply.

** PHOTOGRAPHY & STORAGE DETAILS **

For each purpose below, we will:
  • Capture photos/videos during the specified event
  • Store in: [Google Drive / Fedena / local encrypted server]
  • Retain until: [end of academic year / 2 years / until graduation]
  • Access: [school staff only / yearbook designer / parents in group]

---

PURPOSE 1: ANNUAL DAY PERFORMANCE
Event date: [DD-MM-YYYY]  |  Audience: [students/parents/public]
☐ YES, I consent to my child being photographed during the annual 
   day performance.
☐ NO, I do not consent.

If YES: Where should photos be shared?
  ☐ Private Google Drive link to parents only (48 hours after event)
  ☐ School website gallery (password-protected, parents only)
  ☐ Fedena app (visible to school staff and parents)
  ☐ NO sharing — store only for school records

---

PURPOSE 2: SPORTS DAY / INTER-HOUSE COMPETITIONS
Event date: [DD-MM-YYYY]  |  Audience: [students/parents/public]
☐ YES, I consent to my child being photographed during sports day 
   and inter-house events.
☐ NO, I do not consent.

If YES: Where should photos be shared?
  ☐ Private Google Drive link to parents only (48 hours after event)
  ☐ School website gallery (password-protected, parents only)
  ☐ Fedena app (visible to school staff and parents)
  ☐ NO sharing — store only for school records

---

PURPOSE 3: SCHOOL YEARBOOK (PRINT)
Digital photos will be edited and printed in the hardcopy annual 
yearbook distributed to all students.
☐ YES, I consent to my child's photo being in the printed yearbook.
☐ NO, I do not consent. (Child's photo will not appear in yearbook.)

---

PURPOSE 4: SCHOOL WEBSITE & ONLINE GALLERY
Photos will be uploaded to the school website's password-protected 
gallery, visible to parents and staff only.
☐ YES, I consent to my child's photo on the school website gallery.
☐ NO, I do not consent.

---

PURPOSE 5: ADMISSION BROCHURE & MARKETING MATERIALS
Recent photos of school events may be used in printed admission 
brochures or marketing materials (prospectuses, open day displays, 
local media releases).
☐ YES, I consent to my child's photo in admission brochures.
☐ NO, I do not consent.

---

PURPOSE 6: SCHOOL APP / FEDENA / INTERNAL MESSAGING
Photos will be uploaded to the school app or Fedena (school 
management system) for internal access by staff and parents.
☐ YES, I consent to my child's photos in Fedena/school app.
☐ NO, I do not consent.

---

PURPOSE 7: WHATSAPP PARENT GROUPS / CLASS COORDINATOR SHARING
Class teachers and coordinators may share event photos in class 
WhatsApp groups (visible to parents and guardians only).
☐ YES, I consent to photos being shared in WhatsApp parent groups.
☐ NO, I do not consent.

---

RETENTION & DELETION
Photos will be retained until: [end of academic year / 2 years / 
until child leaves school]
After this date, photos will be: ☐ Deleted  ☐ Archived offline

You may request deletion of all photos at any time by email.

---

REVOCATION OF CONSENT
You may revoke consent for any purpose at any time without affecting 
your child's education or school services.

To revoke:
  Email: [School Photography Coordinator Email]
  Subject: "Photo Consent Revocation for [Child's Name]"
  Include: Child's name, roll number, and specific purpose(s) 
  to revoke

Upon revocation:
  • We will not capture NEW photos for that purpose
  • Photos already published cannot be withdrawn from external 
    platforms (e.g., once printed in yearbook, we cannot un-print)
  • Photos in Fedena/school app will be hidden within 7 days

---

NO PENALTY FOR REFUSAL
Refusing or revoking consent WILL NOT:
  • Affect your child's participation in school events
  • Impact your child's academic grades or standing
  • Restrict access to school facilities or services
  • Result in any discrimination or disadvantage

Children whose parents do not consent will be:
  ☐ Photographed separately (out of frame)
  ☐ Given an alternative role without camera exposure
  ☐ Seated away from the main performance area

---

PARENT/GUARDIAN DECLARATION

I confirm that:
  ☐ I am the legal parent/guardian of the named child
  ☐ I have read and understood this form
  ☐ I have noted the biometric data definition
  ☐ I understand "processing" includes all forms of sharing, 
     storage, and retention
  ☐ I understand I can revoke this consent at any time
  ☐ I am giving consent freely, without pressure

Signature: ____________________________  Date: _____________

---

DATA PROTECTION CONTACT
Designated Data Protection Contact: [Name & Email]
Complaints: [Email / Phone / Fedena Help Portal]

For complaints about this school's photography practices, you may 
contact the Data Protection Board of India (details at 
dpdpaboard.india.gov.in — to be updated with live URL when 
operational).

---

---

How to Deploy This

Timeline: Collect before event Distribute the form to parents at least 2 weeks before the event (annual day, sports day, etc.). Do not wait until the day of the event. Section 9 requires consent to be obtained before biometric data is captured.

Distribution method: One form per event + purpose Do not ask for “annual year” consent upfront. For annual day (May), send this form specifically for annual day. For sports day (September), send a separate form. Fedena allows you to attach forms to event registrations — use this feature to link consent directly to the event.

Collecting responses

• Option 1 (Digital): Google Form. When parents submit, capture their email and phone. Export responses as a Google Sheet and archive with event records.
• Option 2 (Printed): Distribute with school fee receipt or event registration letter. Collect signed originals at the school office. Scan and file. Keep originals in a locked cabinet.
• Option 3 (Hybrid): Send QR code via WhatsApp or email linking to Google Form; print forms available at school office.

Storage requirement (Section 8) Store responses securely:

• Google Form responses: save in a folder titled “[Academic Year] — Photography Consents — [EVENT NAME]” with restricted access (principal, photography coordinator, one admin only).
• Printed forms: file in a locked cabinet at school office, labeled by event and academic year.
• Retain for at least 3 years (safe assumption; check your local data protection guidelines).

What to do if a parent refuses or revokes

• Annual day: The student still performs. The photographer must ensure the student is not in the frame or is positioned away from the camera.
• Sports day: Same. The child competes; the photographer adjusts positioning.
• Yearbook: The student’s photo does not appear. Leave their section blank or use a silhouette placeholder.
• Website/Fedena: Do not upload photos for that child.
• If a parent revokes after publication (e.g., “remove my child from the school website”), comply within 7 days (no statutory deadline in DPDPA, but 7 days is the safe threshold). For printed yearbooks already distributed, add a note to the principal acknowledging the revocation for future events.

Recordkeeping checklist ☐ Signed consent form or Google Form response for each child, by event and purpose ☐ Date form was distributed and date responses were collected ☐ Storage location of each photo set (Google Drive folder ID, Fedena album ID, etc.) ☐ Retention date (when photos will be deleted/archived) ☐ Log of any revocations and actions taken ☐ Evidence of deletion (email confirmation from Google Drive or Fedena when photos are removed)

---

What Happens Without This Document

Your school photographs the annual day. Parents are not asked upfront; the school assumes consent. After the event, you upload photos to:

• School website gallery (login required, but parents can download and re-share)
• Fedena system
• WhatsApp parent group
• Printed yearbook (1,000 copies distributed)

Three weeks later, a parent (whose child did not consent) emails the principal: “I did not give consent. You have used my child’s biometric data without legal permission. I am filing a complaint with the Data Protection Board.”

Exposure scenario:

One parent complaint triggers a Data Protection Board investigation. The Board investigates whether the school:

• Collected consent before capturing photos (did not)
• Obtained specific consent for each processing purpose (did not — blanket assumption)
• Maintained records proving verifiable parental consent (did not — no form)

Even if only 1 of 500 students is photographed without consent, the violation count is 1 violation per processing purpose: ☐ annual day event photography (1) + ☐ website upload (1) + ☐ Fedena upload (1) + ☐ yearbook printing (1) + ☐ WhatsApp sharing (1) = 5 violations.

⚠ Penalty exposure: Section 9 violations (processing children’s biometric data without verifiable parental consent) trigger penalties up to ₹200 crore per violation